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(54) On-line shopping system and the method of payment settlement 



(57) When performing on-line shopping using the 
Internet, and when performing payment settlement for a 
product by a credit card, user's card data runs over the 
Internet, leaving the possibility of card data leakage, 
thereby causing a security problem. The user decides 
the product he or she wants to buy via a computer net- 
work (Internet) from a user system. Then, a transmis- 
sion ur* calls up a service center to send order data 



including the credit card data via a settlement network. 
Service center invoices the sales price to an approval 
center based on the order data. Approval center pays 
the price to service center. Then, service center sends 
the order data to the shopping system. A delivery 
processing unit then delivers the product to the user 
based on the order data. 
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Fig. 6 is a figure showing an example of purchase 
product selection screen of this invention. 

Purchase product selection screen 32 displays data 
of prcducls the user wished to purchase on product list 
screen 31. This example also displays the data of the 
produds purchased when the user went on-line shop- 
ping before- The user once again selects and confirms, 
the products to be purchased among the product list 
displayed on purchase product selection screen 32. 
This selection operation of the product is performed by 
product confirmation unit 10. 

Fig. 7 is a figure showing an example of a screen for 
inputting persona) data of Bie user of this invertfioa 

The user inputs personal data such as name or 
address to a personal data entry screen 33. 

Fig. 8 fe a figure shewing an example of a screen for 
inputting credit card data of the user of this invention. 

The user performs an input of credit card data w'rtb 
which to settle payment to card data entry screen 34. 

Fig. 9A and Fig. 9B are the figures showing exam- 
ples of screens for finishing on-tine shopping of this 
invention. 

On the screen of Fig. 9A, when the OK button is 
clicked by the mouse, user system 5 enciphers the 
product data, personal data, payment settlement data 
{credit card data) by encipherment unit 12. Then, it 
transmits flie product data! personal data, and payment 
settlement data 21 io service center 7 via payment net- 
work S by transmission unit 11. And. after the product 
data, personal data, and payment settlement data 21 
have been sent to service center 7 and the use of the 
credit card is approved, a screen o! Fig. 9B is displayed, 
notifying that the on-line shopping has been completed. 

Rg. 10 is a figure showing the flow of ordered data 
of this invention. 

With this invention, ordered product data is sent to 
a business terminal or the PCs of each shop from ihe 
service center as shown in Fig. 1 0. 

Fig. 11 is a figure showing the flow of products of 
this Invention. 

With «s invention, the product is delivered from 
each shop to the user as shown in Fig. 11 . 

Fig. 12 shows a figure showing the flow of credit 
card data of this invention. 

With *»s invention, as shown in Fig. 12, the credit 
card data passes through the service center from ihe 
user computer, and sent to the card company via the 
GAFIS network. Because of this, the credit card data of 
the user can be sent to the card company the user using 
without passing over the internet 

The CAFIS is an acronym for Credit And Finance 
Information Switching System. II means the credit on- 
iine system tor shared use developed by NTT (Nippon 
Telegraph and Telephone) Corporation. 

Fig. 13 is a figure showing the flow of payment of 
thissnvenfioa 

As shown in Fig. 13, the service center sends the 
payment collected from the credit card cornpanies to 
each shop. 
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Frgs. 14 and 15 are figures showing the data sent 
from the user system to the service center of this inven- 
tion. 

Next, according to the Itowcharts of Rg. 2 and Rg. 
5 3, the procedure of on-line shopping of this invention is 
explained. 

The procedure of on-line shopping is explained 
below wherein the computer network 4 is the Internet. 
The Internet refers to the network among public organi- 
io zations based on the TCP/IP. Approval center 13 is var- 
ious kinds of credit card companies. 

it is possible to configure user system 5 of this 
invention with a computer and one or more programsfor 
ordering products The above-mentioned program is a 
is program having functions of product selection unH 8. 
download unit 9, product confirmation unit 10. transmis- 
sion unit 11, and encipherment unit 12. Also, A is 
assumed that the programs with which to order the 
products memorized in a floppy disk or CD-ROM are to 
20 be set ready on the user computer. 

First of all, the user connects the user computer to 
the Internet or computer network 4 lor starting a session 
and on- fine shopping. Then, the user selects a mail in 
which to do shopping, out of shopping mall A 3a to 
25 shopping man C 3c offered by shop system 2a to 2c, 
and connects the user computer to the shopping mail 

(51) . Connection to the Internet and connection io 
shopping mails use the same method with the regular 
connection method of on-line shopping of Internet. For 

$o instance, when the user selects shopping man A 3a, the 
information screen 30 tor shopping mall A of Fig. 4 is 
displayed on the user computer. Then, the user lets 
product Sst screen 31 displayed from shopping mall A. 
to select which products to buy. Selection of products is 
35 performed by a clicking the mouse at the MARK button 

(52) . Processing of the above S2 is performed by prod- 
uct selection unit 8. When the MARK button is clicked, 
cfowntoad unit 9 fetches the product data of the product 
the user wanted to buy at the above S2 from the product 

w data base provided for shop A system 2a. The seller 
data shown m Figs. 14-and 15 also included in the prod- 
uct data and downloaded. Download unit 9 stores the 
received product data into a hard disk provided for the 
user computer. The product dala shown in Figs. 14 and 
4S 1 5 is an example of downloaded data by download unit 
9. To select more products to buy from the same shop- 
ping malt, repeat the above steps from S2 to S3 (S4). To 
seJect a product to buy by connecting another shopping 
mall, the user calls up another shopping malt and repeal 
so the above steps from S1 to S3 (S4). The download unit 
downloads and stores the product data with same for- 
mat as shown in Figs. 14 and 15 even when the product 
data is downloaded from other shopping malls. After Fin- 
ishing selection of all products the user wants to pur- 
55 chase (S3), the user finishes the session with the 
Internet (S5). 

After finishing the session with the Internet (S5), a 
routine or another program thai has the above product 
confirmation unit 10, transmission unit 11, and end- 
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pherment unit 12 is activated- The above program can 
be stored anywhere in a floppy disk, CD-BOM. or hard 
disk. When a program provided will product confirma- 
tion unit 10, transmission unit 11, and enciphermerrt unit 
12 is started, purchase product selection screen 32 is . 
displayed on the user computer. On tfre purchase prod- 
uct selection screen 32, product data downloaded and 
stored in a hard disk by download unH 9 is displayed. On 
purchase product selection screen 32, products pur- 
chased previously through on-line shopping are also 
displayed besides the product that the user wants to 
purchase this time by the on-line shopping via the Inter- 
net This is because download unit 9 downloads and 
stores new purchasing product data adding to the prod- 
uct data purchased in the past through on-line shopping 
without deleting them. It is possible to delete pro*"* 
data purchased by the past by downloading new prod- 
uct data On purchase product selection screen 32, for 
instance, it is assumed that a purchase of T shirts was 
made Dn October 15, 1995. It is possible that the user 
warns to purcbaseaTshirtagainon November 1, 1995- 
The user confirms the product to purchase this time on 
purchase product selection screen 32 (SB). The conlir- 
maiion method is to move the cursor to the product to 
be purchased, and cfick the mouse, then move the cur- 
sor to the purchase button in the center of purchase 
product selection screen 32 and then click the mouse. 
The user can confirm the selection of the producis from 
the different shopping malts by the purchase product 
selection screen 32. Above operation is a process 
implemented by product confirmation unit 10. After fin- 
ishing the selection of products to purchase, the user 
clicks ihe TRANSMIT button on purchase product 
selection screen 32. Then, personal data input screen 
33 of Fig. 7 is displayed on the computer. The user 
inputs the personal data (S7) according to the input 
guide on personal data input screen 33. When personal 
data has been input and the user clicks the OK button 
on personal data entry screen 33, a card data entry 
screen 34 of Fig. 8 is displayed on the computer. The 
user inputs the credit card data with which to make pay- 
ment according to the input guide on card data entry 
screen 34 (SS). With the format shown in Figs. 14 and 
15, the persona! data and the credit card data are cop- 
ied and appended to each product data of the confirmed 
producis by the product confirmation units. Accordingly, 
one credit card data can be used for the different prod- 
ucts from the same or different shopping malls. When 
the user dicks the OK button on card data entry screen 
34, the screen of Fig. 9A is displayed for the reconfirma- 
tion of product purchase. When the OK button is clicked 
on the screen of Fig, 9A, the user system 5 (the pro- 
gram that makes product order) automatically calls 
service center 7, sets settlement network 6 to transmit 
product data, personal data, and payment settlement 
data (credit card data) 21 to service center 7. The trans- 
mission is performed, for example, by point-to-point pro- 
tocol (PPP) via settlement network 6 using the public 
line which the third party cannot access. 



Figs. 14 and 15 show the product data (including 
seller data), personal data, payment settlement data 
(credit card data) 21 which user system 5 sends to serv- 
ice center 7. 

i In Fig. 15, although E-MAIL ADDRESS is not 

included in personal data entry screen 33, E-MAiL 
ADDRESS can be added to personal data entry screen 
33 as an input item. Input items can be changed arbi- 
trarily based on the needs of credit card companies or 
to shops. The seller data of Ftg. 14 and Rg- 15 may be 
downloaded by the database shop systems 2a to 2c 
when the session with the Internet is cut by the user. Or. 
itrnay be downloaded by the database shop systems 2a 
to 2c when the data is transferred from user system 5 to 
,5 service cenler 7. When the transmission ends normally, 
and the approval of card use is confirmed by service 
center 7, the screen of Fig. 9B is displayed on the user 
computer. ^ 
The above steps from S1 to S8 are the portion the 
20 user is directly involved in on-line shopping. The 
processing explained below at S10 relates to service 
center 7, approval center 13, and each shop system 2a 
lo2c. . 

The product data, persona! data, and payment set- 
flement data 21 shown m Fig. 14 and Fg. 15 are the 
data before they are enciphered by encipherment unit 
12. , 
Service center receives ihe product personal 
data, and payment settlement data 21 via settlement 
so network 6 (SlO). Because the product data, personal 
data and payment settlement data 21 have been enci- 
phered, service center 7 decodes them to original data 
by decoding unit 14. The encipherment method and 
decoding method is explained in detail in Embodiment 
as 2 Based on the decoded product data, personal data, 
and payment settlement data 21 , service cenler 7 then 
checks credit authorization of the user to approval 
center 13 (S11). J it _ 

As described the download unit downloads the 
40 product data with the same formal from a plurality of dif- 
ferent shopping malls, the transmission unit transmits 
one card data as the payment settlement data for the 
phir amy of products downloaded from the plurality of af- 
ferent shopping malls; As the result the service center 
45 requests the approval center to collectively settle the 
plurality of producis with one credit card data. 

Approval center 13 of this invention is a credit card 
company. Among the product data, personal data, and 
payment settlement data 21, service center 7 gets data 
so necessary for credit authorization check, and sends the 
credit authorization data to approval center 13, which is 
a corresponding credit card company, via the CAFIS 
network to check credit authorization 26. The CAFIS 
has the protocol which a plurality of a edit card compa- 
ss nies commonly use for checking credit a"^ 3 ^" 
from the credit authorization checking terminal installed 
in the contract shop. Upon receiving data via TCP/IP 
from user system 5. service center 7 converts neces- 
sary data into the data that suits the protocol used by 
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Ihe CAFtS for credit authorization check. Approval 
center 13 or a credit card company returns the result of 
credit authorization check 26 to service center 7. {The 
. returning of the result of credit authorization check from 
approval center 13 to service center 7 is not shown in 
Fig. 1.) H approval is not given as the result of credit 
authorization check (S12), service center 7 notifies user 
system 5 via settlement network 6 at rest time that 
shopping can not be done (SIT). When notified that 
stropping cannot be done, the user wilt retry the above 
steps from S6 to S8 H he or she has another credit cards 
so that payment tor the product can be changed to a dif- 
fererrt credit card. Then again, product data, personal 
data, and payment settlement data 21 are sent to serv- 
ice center 7. If there is no other credit card, it is not pos- 
sible to purchase the product Therefore, the order 
content is filled out the order form, and the product can 
be ordered to the pertinent shop by facsimile machine, 
or telephone, or mail. 

When approved by approvaf center 13 (S12), serv- 
ice center 7 notifies the user system of the completion of 
order processing for the shopping (S13). Completion of 
notification is done by displaying sGreen shown in Fig. 
9(B) on the computer screen of user system 5, 

When approved by approval center 13 (S12), 
among the product data, personal data, and payment 
settlement data 2 1 received from user system 5, service 
center 7 also notifies the pertinent shop systems 2a to 
2c of the product data and personal data (product data, 
personal data 22 of Fig. 1} (S14). After receiving the 
product data and personal data 22 from service center 
7, frie shop system outputs order instruction by delivery 
processing unit 19 and delivers the ordered product to 
the user (product delivery 23 in Fig. 1) (S20). At Ihfe 
time, if delivery method or delivery fee of the product is 
stored in the product data for each product, the delivery 
processing can be promptly performed by referring to 
the delivery meftod or delivery fee. 

Moreover, service center 7 invoices for the payment 
to approval center 13 (sales invoice 27 in Fig. 1) (S15). 
Because there are normally two or more a edit card 
companies to which the payment for the product is 
made, the service center sums up the prices to be 
invoiced for each credit card company by accumulation 
unit 16. Sales invoice 27 is also sent on-line via the 
CAFIS similarly to credit authorization check 26. Or out- 
putting on a magnetic tape is also possible for off-line 
invoice. Receiving sales invoice 27, approval center 13 
makes payment to service center 7 (payment collection 
28 Sn Rg. 1) (S21). Furthermore, approval center 13 
requests payment transfer 25 to the user by payment 
coftectjon unit 17 (S22). After collecting payments from 
approval center 13, service center 7 performs payment 
24 to the shop (S16). 

The on-line shopping of this invention is realized by 
the above procedure The shop system receives pay- 
ment from the credit card companies via the service 
center just like the ordinary payment caused by shop- 
ping with a credit card. 



Because the product data or personal data is sent 
from service center 7 to the business terminal of each 
shop system as shown in Rg. 10, the above data can be 
fetched into the system of sales processing and so on of 

$ each shop system. 

ff the data regarding product delivery or the data for 
delivery fee and so on is stored in the product data, 
each shop system can promptly and efficiently perform 
delivery business by using these data. 

10 In sending credit card data (and personal data) as 
the payment settlement data from the user system to 
the service center, foe leakage of credit card data can 
be prevented because sending is performed via a dedi- 
cated settlement network 6. 

is Furthermore, security can be more improved 
because payment settlement data is enciphered. This 
helps resolve the leakage of credit card data which has 
been causing a problem for the on-line shopping via the 
Internet so far. 

so Jn addition, the credit card data is sent to the credit 
card companies which are the approval centers, from 
the service center via the CAFIS. For the credit card 
companies, the flew is the same as the normal flow for 
receiving credit card data for shopping with a credit card 

25. even though the service center exists between the 
users and the credit card companies. 

As shown in Rg. 13, the payment is performed from 
the credit card companies to each shop via the service 
center. But, because the payment is done by the setUe- 

30 ment among banks, the paymerrtflow is the same as the 
normal payment flow for shopping with a credit card for 
both the credit card companies and shops even though 
the service center east between the credit card compa- 
nies and shops. 

35 

Errfcodimerrl 2. 

In this Embodiment 2, the encpher merit method for 
encrphermerrt unit 12 and the decoding method for 
to decoding unit 14 of the above Embodiment t wiB be 



Fig. 1 6 is a figure showing an example of data to be 
enciphered and decoded, and data contents. 

With this embodiment, among the product data, 
personal data, payment settlement data 21 sent from 
user system 5 lo service center 7, especially the credit 
number, password code, and credit card expiration are 
enciphered as the credit card data. 

Fig. 17 through Fig. 19 are the figures explaining 
examples of enciphering credit card data 

Examples of encrphermerrt shown in Fig. 17 
through Fig. 1 9 are explained. The credit card data to be 
enciphered is, as shown in (A) of Rg. 16, the credit 
number, password code, and credit card expiration. And 
as shown in (B) of Fig. 1 6, the credit number is 1 6 digits 
of 1 2345678901 23456. The password code is 4 digits of 
2468. The credit card expiration is 4 digits of 9903, 
which indicates that ft can be used until March 1999. 

First, the encrphermerrt example 1 shown in Fig. 17 
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The encipherment example 1 shown in (A) of Fig. 
17 shows scrambling credit card data, and concatenat- 
ing random number 1 generated by encipherment unrf 
12 to the scrambled 24-digit credit card data so as to s 
send a to service center 7 as the credit card data. The 
method of scrambling the above credit card data is as 
shown in (B) of Fig. 1 7. Of the 24-digit credit card data, 
the first digit is sifted to the second digit, the second digit 
is shifted to the third digit, and the third digit is shitted to io 
ihe fourth digit. In this way, digits are shifted one by one 
from left to righrl. and the 24ih digit is shifted to the first 
digit The credit card data enciphered in encipherment 
example 1 is decoded to the original data by decoding 
unit 14 of service center 7. The decoding method is, first js 
of all. remove random number 1 from the credit card 
data including Ihe received random number 1 . Then, the 
first digit of the credit card data is sifted to the 24th digit, 
the second digit is shifted to the first digit, and the third 
digit is shifted to the second digit, and the fourth digit is a 
shifted to the third digit tn this way, the original credit 
card data is restored by shifting digits from right to left 
one by one. 

For encipherment example 2 of Fig. 18,. 24-digit 
credit card data, five digits of random number 1 , in total z 
29 digits are scrambled and sent to service center 7. 
The scramble method is as shown in (B) of Fig. 18. The 
first digit is shifted lo the second digit, the second digit is 
shifted to the third digit, and the third digit is shifted lo 
the fourth digit. Then. 28ih diojl is shifted to the 29th 3 
digit, and the 29th digit is shifted to the first digit In this 
way. 29*figj1 data including the credit card data and ran- 
dom number 1 are shifted one by one irom left to right 
The decoding method of decoding unit 14 at service 
center 7 is to restore the received credit card data s 
including random number 1 into the original data with 
the method opposite to the scramble method shown in 
(B) of Fig. 18. First of all, the first digit is shifted to the 
29th digit, the second digit is shifted to the first digit, the 
third digit is shitted to the second digit, and the fourth < 
digit is shifted to the third digit. In this way, when the 29- 
digit credit card data including random number 1 is 
shifted one by one from right to left, the original 29-dSgjt 
data is restored. When the 29-digit credit card data 
including random number 1 is restored, the 24-digft ■ 
credit card data is taken out by removing five cSgte from 
the right which are random number 1 , out of the 29 dig- 
its. 

For enciphermerrl example 3 of (A) of Fig. 19, ran- 
dom number 1 and random number 2 are concatenated 
to the scrambled credit card data and sent to service 
center 7. The method of scrambling the credit card data 
of encpherment example 3 is the same as the scramble 
method of the credit card data of encipherment example 
1 . For encipherment example 4 shown in (B) of Fig. 19, 
24-digit credit card data and five digits of random 
number 1, in total 29 digits, are scrambled, and random 
number 2 is concatenated. The method of scrambling 
24-digft credit card data and five digits of random 



number 1. in total 29 digits, is the same as the scramble 
method of the above encipherment example 2. Further- 
more, for encipherment example 5 of (C) of Fig. 19, 24- 
digit credit card data, S-digit random number 1, and 6- 
digit random number 2, in total 35 digits are scrambled 
and sent to service center 7. 

In the embodiment 2, encipherment example 1 to 5 
were explained. However, Ihe above examples are only 
examples, and do not limit the methods of endpherment 
j and decoding. 

In this way, by enciphering and sending the credit 
card data to the service center, moreover, by running 
the credit card data on the settlement network which is 
a dedicated line, security is further improved effectively. 
5 Having thus described several particular embodi- 
ments of the invention, various alterations, modifica- 
tions, and improvements will readily occur to those 
stalled in the art Such alterations, modifications and 
improvements are intended to be part of this disclosure, 
o and are intended to be within the spirit and scope of the 
invention. Accordingly, the foregoing description is by 
way of example only, and not intended to be limiting. 
The invention is limited only as defined in the Mowing 
claims and the equivalents thereto. 

>5 

Claims 

1 . An on-fine shopping system using a compuier net- 
work, comprising: 

(a) a store system for memorizing product data 
and providing a shopping man for products via 
a shopping mall network; 

(b) a user system, connected to the shopping 
as ma)lnetworKirKludirear^« ,urtse,ectionunit 

for selecting a product to be purchased irom 
the shopping mall provided by the store sys- 
tem, a download unit for downloading the 
selected product data from the store system via 
40 the shopping mall network, and a transmission 

unit for inputting payment settlement data of 
the product and personal data of user who 
selects the product, tor setting a settlement 
network different from the shopping mall net- 
45 work, and for transmitting the selected product 

data, the pay merit settlement data and the per- 
sonal data via the settlement network based on 
a first protocol; and 

(c) a service center for receiving the selected 
sc. product data, the payment settlement data, and 

the personal data via the settlement network, 
from the user system and then performing a 
payment settlement. 

2. The on-line shopping system of claim 1, further 
comprising art approval center for approving the 
payment settlement based on a second protocol 
different from the first protocol, and wherein the 
service center selects at least the payment settJe- 
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mertt data among the received product data, the 
payment settlement data, and the personal data 
received based on the first protocol, converts the at 
least the payment settlement data to be a suitable 
data to the second protocol, and then requests the s 
approval of the payment settlement to the approval 

3. The on-line shopping system of claim 2, wherein 
the user system includes an encipherment unit for n 
enciphering at least a part of the selected product 
data, the payment settlement data, and the per- 
sonal data, and wherein the service center includes 

a decoding unit tor decoding the enciphered part of 
the selected product data, the payment settlement u 
data, and the personal data. 

4. The on-line shopping system of claim 1. wherein 
the service center further includes a distribution unit 
for distributing the product data and the personal 2 
data tor which the payment settlement has been 
approved, and wherein the store system further 
includes a delivery processing unit for receiving the 
product data and tfie personal data and then per- 
forms a delivery process ol the product 2 

5. The on-line shopping system of claim 2, wherein 
the user system transmits the card data of the credit 
card as the payment settlement data, and wherein 
the approval center approves the payment settle- i 
merrf based on the card data. 

£. The on-line shopping system of claim 5, wherein 
the download unit downloads the product data with 
the same format from a plurality of different shop- i 
ping malls, the transmission unit transmits one card 
data as the payment settlement data for the plurality 
of products downloaded from the plurality of differ- 

' ent shopping malls, and wherein the service center 
requests the approval center to collectfvely settle ■ 
the plurality of products with one card data. 

7. The on-line shopping system of claim 6, wherein 
the user system further includes a product confir- 
mation unit for selecting a product to be purchased 
from the downloaded products. 

& The on-line shopping system of claim 2, wherein 
the approval center further includes a payment col- 
lection una for collecting the payment based on the 
card data. 

9. Trie on-line shopping center of claim 8. wherein the 
servicecenter further includes an accumulation unit 
for summing up amounts of the payment settlement 
based on the card data in correspondence with 
each of the plurality of the approval centers. 

10. The on-line shopping system of claim 2, wherein 



{he shopping mall network is a computer network 
that can be accessed by a third party, and the set- 
tlement network is a network set separately 
between the user system and the service center. 

1 1. The on-fine shopping system of claim 10, wherein 
foe shopping maS network is Internet 

12. The on-line shopping system of claim It. wherein 
the settlement network is formed by a public fine, 
wherein the first protocol is Pwrrt-to-Poirtt Protocol, 
wherein the second protocol is a protocol which is 
used between the shop system and the approval 
center for a shopping by the credit card. 

13. A payment settlement method which has a store 
system offering shopping malls, a user system that 
selects a product to be purchased from the shop- 
ping malls, a credit card company system that 
approves a payment settlement with a credit card, 
and a service center which exists among the store 
system, the user system and the credit card com- 
pany system, the payment settlement method, 
comprising steps of: 

(a) selecting a product to be purchased from 
shopping malls offered by a shopping system 
via a shopping mat! network in the user system; 

(b) downloading the data of the selected prod- 
, ucts from the shopping system into the user 

system via the shopping mall network; 

(c) transmitting the data of the downloaded 
products, the data of the credit card for the pay- 
ment settlement, and the data of the purchaser 

s oftheprcductfromtheusersystemtotheserv- 
ice center using a settlement network different 
from the srwpp'rig matt network; 

(d) requesting an approval of the payment set- 
tlement from the service center to the credit 

7 card company syslem based on the credit card 

data for the payment settlement; 
£e) approving the payment settlement in the 
credit card company system based on the 
credrt card data; 

s (0 distributing the product data approved by the 

credit card company system tor the payment 
settlement and the data of the product pur- 
chaser from the service center to the store sys- 
tem; and 

o (g) collecting the payment in the credit card 

company system from the purchaser of the 
product based on the credit card data. 

14. The payment settlement method of dam 13, 
s wherein the step for requesting the approval of the 
payment settlement includes a step of converting 
the received credit card data suitable to a prede- 
fined approval protocol provided by the credit card 
company system. 



19 



EP0779587A2 



t5. The payment settlement method of claim 13, 
herein the step for selecting the product includes 
a step of selecting products from different shopping 
mails, and wherein the step for downloading 
includes a step of storing the data of products 5 
selected from different shopping malts in a same 
format 

16. The payment settlement method of claim 15, fur- 
ther comprising steps of confirming a product to be to 
purchased based on the product data downloaded 
between the downloading step and the transmitting 

17. The payment settlement method of cfaim 16, fur- 75 
ther corrprising step of corresponding one credit 
card data to the plurality of products selected from 
the different shopping malls between the above 
downloading sfep and the transmitting step, and 
wherein the step for approving the payment settle- 20 
mem includes step of settling collectively for the 
plurality of products purchased based on one credit 
card data. 

18. The payment settlement method of claim 17. fur- is 
ther comprising step of connecting the user system 

to Internet as the shopping mail network to access 
the shopping mall. 

19. The payment settlement method of claim 18. 30 
wherein the transmitting step includes a step of 
generating a settlement network using a public line 
based on Point-to-Point Protocol. 
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Fig.2 

( STAR~T~ 



3 



I USER CONNECTS SHOPPING MAIL 



31 



USER SELECTS PRODUCT 
FROM SHOPPING MALL 




COMMUNICATION 
VIA COMPUTER 
NETWORK 



| USER ENDS INTERNET SESSION 
i 



USER SELECTS PRODUCT TO BE 
PURCHASED 



USER INPUTS PERSONAL DATA 



USER iNPUTS CREDIT CARD DATA 



COMMUNICATION 
VIA SETTLEMENT 
NETWORK 



SETTLEMENT NETWORK 



SERVICES CENTER RECIEVES PRODUCT DATA, 
PERSONAL DATA. PAYMENT SETTLEMENT DATA. 



CONTINUED TO FIG.3 
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Fig-3 



CONTINUED FROM FIG.2 



SERVICE CENTER CHECKS 
CREDIT AUTHORIZATION TO 
APPROVAL CENTER 




SERVICE CENTER NOTIFIES 
USER SYSTEM OF SHOPPING 
COMPLETION 



SERVICE CENTER 
NOTIFIES USER 
SYSTEM OF SHOPPING 
UNACCEPTABLE 



SERVICE CENTER NOTIFIES SHOP 
SYSTEM OF PRODUCT DATA, 
PERSONAL DATA 



SI 4 



SERVICE CENTER SENDS 
INVOICE TO APPROVAL 
CENTER 



SHOP SYSTEM 
DELIVERS PRODUCT 
TO USER 



APPROVAL CENTER 
MAKES PAYMENT TO 
SERVICE CENTER 



SERVICE CENTER SETTLES 
PAYMENT TO SHOP 



APPROVAL CENTER REQUESTS 
USER TO MAKE PAYMENT 
TRANSFER 
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Fig.7 



PERSONAL DATA ENTRY 



NAME(KANJI) : 
KANA LETTERS : 
ZIP 

PREFECTURE : 
ADDRESS : 
PHONE NO. : [ 
DATE OF BIRTH: [ 
AGE: | 

ENTER DATA BELOW IF PRODUCT TO 8E DELIVERD 
TO THE ADDRESS OTHER THAN ABOVE 



1 SEX : 



BLOOD TYPE :| j 



NAME (KAN Jl) : 
KANA LETTERS : 
ZIP 

PREFECTURE : 

ADDRESS : 

PHONE NO. : 

CLICK OK BUTTON TO CONFIRM 

ABOVE ALL CORRECT 
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Fig.8 



— | Credit Card Data Entry 

CHOOSE YOUR CREDIT CARD BEING USED j AMEX \ Ffrl 
ENTER YOUR CREDIT CARD NUMBER (16 DIGITS) 

i l -l ' i- l l - l 

ENTER YEAR AND MONTH GOOD THROUGH 

OF YOUR CREDIT CARD ABOVE [_ J 

(EX : DECEMBER 1999=9912) 

ENTER YOUR PASSWORD CODE (4 DIGITS) I I 

ENTER PAYMENT METHOD Q 

1. LUMP SUM 2. INSTALLMENTS 3. REVOLVING 

CLICK OK BUTTON TO CONFIRM 

ABOVE ALL CORRECT [ OK | 
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Fig.9A 

AN IMAGE OF THE SCREEN FOR CONFIRMING 
THE USER'S FINAL INTENT OF PURCHASE 




CREDIT CARD ACCEPTANCE 



YOUR INDJVISUAL DATA AND CARD 
DATA ARE SENT. 



PRESS OK BUTTON BELOW IF ALL DATA IS CORRECT. 

ALL DATA IS NOW SENT TO CREPASS CENTER. 

FINAL CONFIRMATION ~ZmZ 
MAY WE GO AHEAD f CANCEL [ 
WITH ORDERLtNG FOR YOU? ________ 



Fig.9B 

THANK YOU VERY MUCH ! 



TRANSACTION NOW COMPLETED 
THANK YOU 
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Bg.14 




> 
2 



LOWERMOST PURCHASE 



. CONTINUED TO NEXT PAGE 
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Fig.15 



CONTINUED FROM FIG.14 
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Rg.16 



(16 OtGrrS)__J4_D!GtTS^^ — 




) CREDIT NO.= 1234567890123456 
PASSWORD CODE =£46S 
EXPIRATION =9903 (1999 MARCH) 




Fig-17 



EXAMPLE OF ENC1PHERMEMT 1- 



W CREDIT CARD DATA + RANDOM NUMBER 1 
AFTER SCRAMBLE ______ 



(B) SCRAMBLE 

DIGIT 1 - DIGIT 2 

DIGIT 2 -> DIGIT 3 

DIGIT 3 - DIGIT 4 



METHOD OF CREDIT CARD DATA 



DIGIT 23 



DIGIT 24 



DIGIT 24 ->_rjiGn_i_ 
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On-line shopping system and the method of payment settlement 



(57) When performing on-line shopping using the 
Internet, and when performing payment settlement for a 
product by a credit card, user's card data runs over the 
Internet, leaving the possibility of card data leakage, 
thereby causing a security problem. The user decides 
the product be or she wants to buy via a computer net- 
work (Internet) from a user system. Then, a transmis- 
sion unit calls up a service center to send order data 
Fig.1 

SYSTEM CONFIGURATION OF ONLINE SHOPPING SYSTEM 



including the credit card data via a settlement network. 
Service center invoices the sales price to an approval 
center based on the order data. Approvai center pays 
the price to service center. Then, service center sends 
the order data to the shopping system. A delivery 
processing unit then delrvers the product to the user 
based on the order data. 
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